Sr. Staff Cyber Security Architect

Roles and Responsibilities

In this role, you will:

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify & prioritize security features across the system.
• Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
• A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
• Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
• Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.

Technical Qualification

• Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
• Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault.
• Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.
• Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
• Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
• Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
• Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.
• Ability to architect security across edge, customer datacenter and cloud deployments.
• Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Education Qualification

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with significant experience in Cybersecurity domain with a minimum of 14 years of experience.

Desired Characteristics

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.
• Hands-on architecture mindset, capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.

Inclusion and Diversity

GE HealthCare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. Behaviors We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus; and drive ownership, always with unyielding integrity.